Privacy Policy

I. Introduction

RIVERGATE RATING GROUP S.R.L. (“RRG”), headquartered in Bucharest, Romania, Str. Industriilor no. 56, 3rd floor, sector 3, ap. 4, block 1, J2006014791408, unique registration code RO 19023870, is the controller of personal data transmitted through the website www.lakeside11.ro
RRG is committed to respecting the confidentiality of your personal data. We will treat all personal data you provide as confidential and will process it only in accordance with applicable legislation. This privacy notice describes RRG’s policies and practices regarding the collection and use of your personal data and defines your privacy rights.
The confidentiality of information is a continuous responsibility, and therefore, we will update this privacy notice from time to time as we undertake new personal data practices or adopt new privacy policies.

 

II. Legislative Context

In accordance with the requirements of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the “GDPR Regulation,” applicable from May 25, 2018, we are obliged to manage, in safe conditions and only for the specified purposes, the personal data you provide by using our website in accordance with the provisions of the GDPR Regulation.
For more details regarding the content of this legal framework, please access the following link: https://eur-lex.europa.eu/legal-content/RO/TXT/?uri=CELEX%3A32016R0679.

 

III. Data Protection Officer

We have appointed a Data Protection Officer (DPO) regarding all aspects related to the protection of personal data. You can contact the DPO concerning all matters related to the processing of your data and the exercise of your rights under applicable legal provisions, especially if you have questions or concerns about how we process your personal data. The email address to contact the Data Protection Officer is: dpo@rrg.ro.

 

IV. Personal Data Processing Policy

4.1. Protecting your privacy while using our website is an extremely important matter for us. Therefore, we provide detailed information below regarding the processing of personal data. Personal data is processed on this website by RIVERGATE RATING GROUP SRL, the owner of the domain. When using and processing personal data, the company strictly complies with the applicable legal provisions regarding data protection. The right to use personal data and anonymous data belongs to RIVERGATE RATING GROUP SRL within the limits provided by law, while respecting the rights of the data subjects as described below.

 

4.2. This data protection statement applies exclusively to www.lakeside11.ro  and its associated subdomains, as well as to pages presenting promotional campaigns. It does not apply to pages controlled or operated by third parties. Please check the data protection statements of third-party-controlled or operated web pages, as these pages are not under the control of the residential project, and we do not assume responsibility for their content or their data protection measures.

 

4.3. We do not use automated decision-making, including profiling, in a way that produces legal effects or similarly significantly affects you. All decisions concerning your personal data are made with human intervention to ensure fairness and accuracy. Should this policy change in the future, we will update this provision and provide you with clear information on the logic involved, the significance, and the envisaged consequences of such processing for you.

 

4.4. Data Security:
To protect your data, technical and organizational measures have been implemented to safeguard it specifically against loss, manipulation, or unauthorized access. The adopted measures are regularly reviewed and constantly updated to align with technological advancements.

 

4.5. Notifications.

In the event of a personal data breach that poses a risk to the rights and freedoms of individuals, we are obligated to notify the relevant supervisory authority. This notification will be made without undue delay and, where feasible, no later than 72 hours after becoming aware of the breach.

If the data breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly and without undue delay, where feasible. The notification will include a description of the nature of the breach, the name and contact details of our Data Protection Officer (DPO), a description of the likely consequences, and a description of the measures taken or proposed to be taken to address the breach.

 

V. WHAT KIND OF PERSONAL DATA DO WE PROCESS?

5.1. If you are a client or potential client of the residential project:

We collect personal data during most interactions with you, as well as other aspects of our activities.

 

5.2. The categories of data we process include the following:

a) Data necessary to provide an offer upon your request and to maintain contact with you (e.g., name, surname, email, phone number, address);
b) Information about your request, including special requirements and apartment preferences;
c) Additional data needed to conclude contracts between you and us (e.g., for contract signing, we require the ID series and number as well as your address, and for sale-purchase contracts, we require your personal identification number (CNP) for authentication by a notary public);
d) Information about vehicles you may bring onto our property, such as license plate numbers;
e) Information you provide regarding your marketing preferences;
f) Personal data provided by you for registration and subscription to our newsletter;
g) Reviews and opinions about our services;
h) Any other types of information you choose to provide to us.

Additionally, surveillance cameras and other security measures on our properties may capture or record images of you, residents, or visitors in public areas (such as building entrances or hallways), as well as your location data (through images captured by surveillance cameras).

You can always choose what personal data you provide to us. However, if you decide not to provide certain personal data, in cases where our request is based on legal, contractual, or necessary obligations for contract completion, we may be unable to provide certain services. For example:

• If you do not provide your name, surname, email address, or phone number when requesting an offer, we will be unable to create and send the requested offer.
• Considering the current legal obligations, if you do not provide the notary public with your CNP for completing and authenticating the sale-purchase contract, we will not be able to conclude the contract with you.

 

5.3. If you are a potential employee:

We collect the information in your submitted CV and any additional information provided with your CV and/or during interviews you attend.

 

5.4. If you are a visitor to our locations:

Surveillance cameras may capture or record images of visitors in public areas (such as entrances to our locations).

 

5.5. If you are a user of our website:

You do not need to provide personal data to access the information available on the website. However, for the technical operation of the portal, we collect the time and date of website access and the IP address from which our website was accessed. For the use of certain services (e.g., the contact form), specific personal data is required. For details, please consult the corresponding section of the operation used on the website.

 

5.6. Special Categories of Personal Data:

The term “special categories of personal data” refers to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data, health data, or data concerning sexual life or sexual orientation. Generally, we do not process such special information unless you choose to provide it to us.

 

5.7. Third-Party Recipients of Personal Data:

To achieve the purposes mentioned above, we may share your personal data with the following categories of recipients:

• IT and cloud service providers (hosting, email, data storage), as well as web developers;
• Payment processors and banking services for purchases and payments;
• Marketing and communication providers – for sending newsletters, email campaigns, or messaging communication;
• Legal and notary service providers for signing sale-purchase or rental contracts;
• Courier service providers, if document delivery is required;
• Social media platforms and messaging applications, including WhatsApp, if you choose to communicate with us through these channels;
• Public authorities or other institutions, as required by law;
• Contractual partners involved in the implementation of the residential project, based on legal or contractual grounds.

All these recipients will have access to data only as strictly necessary for providing services and under strict confidentiality and data protection commitments.

 

5.8. Using WhatsApp for Communication:

To enhance communication with clients and potential clients, we may use the WhatsApp application, in which case we process the following categories of personal data:

• Name and surname;
• Phone number;
• Content of the conversation (questions, requests, information provided);
• Date and time of the interaction.

WhatsApp is operated by Meta Platforms Ireland Ltd., and its use involves data transfer in accordance with its privacy policy. We recommend using official channels (email, phone) for sharing sensitive or contractual information.

 

5.9. Data Processing for Specific Processes:

In addition to the information already presented, we clarify that personal data processing is conducted based on specific processes as follows:

 

Process	Collected data	Legal basis	Third-party recipients	Retention period
Offer request	Name, email, phone	Legitimate interest / pre-contractual measures	CRM providers, sales partners	3 years
Sale/rental contracting	Name, address, personal identification number (CNP), ID card, signature	Legal obligation / contract	Notary, accountant, legal partners	10 year
Newsletter and commercial communications	Email, name, preferences	Consent	Email marketing platforms (e.g., Mailchimp)	Until consent is withdrawn
Communication via WhatsApp	Phone, name, message	Legitimate interest	WhatsApp Inc.	1 year
Physical interactions (CCTV)	Image, time, location	Legitimate interest / Security	Surveillance system provider	Max. 30 days
Candidate CVs	Data from CV, interviews	Legitimate interest / consent

 

VI. FOR WHAT PURPOSE AND ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA?

6.1. If you are a client or potential client and have provided your data as follows:

A) General contact form or phone call to the number displayed on the website
The contact form (information about availability, purchasing residential units, information about the residential project, evaluations, complaints, etc.): When submitting the contact form or initiating the phone conversation, your personal data in the categories (name, surname, phone number, email address, specific message) will be processed in accordance with the provisions of this section.
Purpose: Providing a response to your request.
• Basis: Legitimate interest in processing your individual inquiries and providing appropriate responses.
• Consequences of refusal: If you do not provide this data, we will not be able to be contacted, nor will we be able to provide the requested information. For this purpose, the data will be transmitted to sales representatives, who will contact you to respond to your inquiries.

 

B) Submission of the contact form or phone call for a request to view a residential unit in stock
Your personal data in the categories (name, surname, phone number, email address, specific message) will be processed in accordance with the provisions of this section.
Purpose: Preparing, conducting, and completing the purchase of a residential unit in stock or responding to the offers you have requested. The data is processed through the residential project’s sales representatives.
• Basis: Execution of a contract or taking pre-contractual measures at your request.
• Consequences of refusal: If you do not provide this data, you will not be able to receive proposals from the sales representative.

 

C) Contact with you
The data will be transmitted to authorized sales representatives, and you will be contacted by them for the preparation, execution, and completion of the purchase of a residential unit in stock.
Purpose: Processing your personal data to maintain contact with you and provide necessary and relevant information.
• Basis: Conclusion and execution of a contract; additionally, we may transmit information regarding the location you have rented or purchased, based on our legitimate interest.

 

D) Conclusion of the contract with you
Purpose: Processing your personal data to validly conclude the requested contract.
• Basis: Conclusion and execution of a contract and compliance with legal obligations.

 

E) Providing additional information regarding possible financing options for real estate properties or guarantees with a residential property
(e.g., through partners, but not limited to them).
Purpose: Processing your personal data to facilitate information about financing options.
• Basis: Informing you about financial products and/or concluding and executing a service contract.

 

F) Marketing
Purpose: We process your personal data for marketing purposes, such as commercial newsletters and marketing communications regarding new products and services or other offers we believe may be of interest to you.

• Newsletter Subscription
  The data provided during registration (contact and identification data) will only be used for sending newsletters. When sending the newsletter, we will use the email address you provided, and we will need your confirmation that, as the owner of the email address, you agree to receive these communications. We will include an unsubscribe link that you can use if you no longer wish to receive messages.
• Purpose: Sending information about products, services, and events.
  • Basis: Consent.
  • Consequences of refusal: If you do not agree to this processing, you will not receive the newsletter.
• Specific data fields: Salutation, first name, last name, email.

If required by applicable legislation, we will obtain your consent before processing your personal data for direct marketing purposes. In this case, you are informed that you can withdraw your consent at any time, after which you will no longer receive marketing communications from us.

Additionally, during participation at certain events (e.g., Real Estate Fairs), we may take some photographs, some of which might be shared online to show others how the events unfolded. In any case, as we respect your right to privacy, we will make every effort to inform you that photos will be taken (for objections to photos, see the “Right to Object” section under “Your Rights”).

 

G) Other Communications: via email, phone, or SMS
Purpose: These communications will have a specific reason, such as:
(i) responding to your requests,
(ii) reminding you to complete a request for an offer or payment,
(iii) informing you about how complaints/incidents were resolved,
(iv) ensuring that you had a pleasant experience using the services provided by our company.

• Legal Basis:

• Our legitimate interest in providing services at the desired standards by resolving requests/complaints and ensuring our full availability.
• If we respond to a request related to the execution of a contract you have concluded with us, the processing basis is the performance of a contract.

 

H) If you are a visitor to our premises
Purpose: We process your personal data to ensure the protection of goods and individuals within the premises.
• Basis: Our legitimate interest in ensuring the safety of clients’ and staff’s goods, as well as the protection of individuals within our premises.

 

I) If you are a user of our website
Purpose: Monitoring traffic to identify errors and/or any other malfunctions of the website.
• Basis: Our legitimate interest in providing you with a fully functional website by repairing any errors and continuously improving it.

 

J) If you are a representative or contact person of our suppliers or business partners
Purpose: Managing contractual relationships with our suppliers or business partners.
• Basis: Execution of a contract.

 

K) If you are a potential employee
Purpose: Evaluating your job application.
• Basis: Conclusion of a contract.

 

For all the above categories of individuals, we may process your data in the context of the following activities:

a) Restructuring, internal reorganizations, or sales of assets or shares
Purpose: Processing your data to carry out the above-mentioned operations.
• Basis: Our legitimate interest in conducting these operations, especially where they would be impossible without processing your data.

b) Security
Purpose: We process personal data to ensure the security of goods and the physical integrity of individuals.
• Basis: Our legitimate interest in ensuring the protection of your goods and the safety of individuals within our premises.

c) Legal Reasons
Purpose: In certain cases, we must process the information provided, which may include personal data, to resolve legal disputes or complaints, conduct investigations, comply with applicable legal regulations, enforce agreements, or comply with public authorities’ requests provided these requests meet the legal requirements.
• Basis:

• Legal obligation (e.g., disclosing certain personal data to public authorities when legally required).
• Our legitimate interest in resolving disputes and/or complaints.

 

6.2. How long do we retain your personal data?

Your personal data is retained for the duration necessary to achieve the purposes detailed in this policy.

We constantly review the necessity of retaining your personal data, and if processing is no longer necessary and the law does not impose an obligation to retain your data, we will delete/destroy your information as soon as possible.
• Data on paper: Complete destruction.
• Digital data: Irreversible technical deletion.

 

VII. WHAT ARE YOUR RIGHTS?

7.1. As a data subject, you have the following rights under GDPR:

a) Right of access: You may request from us (i) confirmation as to whether or not personal data concerning you is being processed and, if so, access to that data and related information, as well as (ii) a copy of your personal data that we hold (Art. 15 of GDPR).

b) Right to rectification: You may inform us of any changes to your personal data or request that we correct the personal data we hold about you (Art. 16 of GDPR).

c) Right to erasure (“right to be forgotten”): In certain situations (such as (i) if the data was collected unlawfully, (ii) the storage period has expired, (iii) you have exercised your right to object, or (iv) processing is based on consent and you have withdrawn your consent), you may request that we delete the personal data we hold about you (Art. 17 of GDPR).

d) Right to restrict processing: In certain situations (such as if the accuracy of the data is contested or the legality of processing is questioned), you may request that we restrict the processing of your data for a certain period (Art. 18 of GDPR).

e) Right to data portability: You may request that we send your personal data to a third party or directly to you (Art. 20 of GDPR).

f) Right to object: In certain situations (such as processing based on legitimate interest), you may request that we stop processing your data (Art. 21 of GDPR).

g) Right to withdraw consent: If we use your personal data based on your consent, you have the right to withdraw that consent. In this case, your data will no longer be processed by us, except where a legal provision requires us to retain and archive it. In any case, we will inform you if such a legal requirement exists and will indicate it explicitly.

 

VIII. HOW DO WE PROTECT PERSONAL DATA?

The website uses information security techniques such as firewalls, access control procedures, and encryption mechanisms, all aimed at preventing unauthorized access to data and ensuring its confidentiality. For more information, please refer to the Terms and Conditions and the Cookie Policy.

 

IX. TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk and to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access to personal data transmitted, stored, or otherwise processed.

• Pseudonymization/encryption of personal data where possible without affecting contract execution.
  • Ensuring confidentiality, integrity, availability, and resilience of processing systems and services. Personal data must be protected against accidental destruction or deletion.
  • A process for regular testing, assessment, and evaluation of the effectiveness of technical and organizational measures to ensure processing security.
  • Access control measures (physical and IT) to prevent unauthorized physical access to data processing facilities.
  • Usage control measures to prevent the use of data processing facilities and systems by unauthorized persons, including mechanisms for assigning privileges and managing usernames and passwords.
  • Transmission control measures to prevent the reading, copying, modification, or deletion of personal data during transmission, transport, or storage on data carriers and to enable checks identifying authorized data recipients, including encryption mechanisms.
  • Data entry control measures to allow for subsequent verification of whether and by whom personal data was entered, modified, or deleted in automated processing systems, including audit logs.
  • Risk assessment process that enables the Provider to evaluate and select the appropriate level of security, considering the risks associated with processing. Such information will be requested from the Provider if applicable.
  • Incident and data breach response policy and procedure governing how the Provider responds to such breaches.
  • Data protection and security training for personnel.

 

X. CONTACT INFORMATION

RIVERGATE RATING GROUP SRL
Email: dpo@rrg.ro
To process your request, we may require identification through the presentation of an identification document.

 

XI. LEGAL ASPECTS

In certain cases, prices may no longer be current. For accurate pricing information, please contact your sales representative. Please ensure that, when signing the sales contract, you confirm the exact specifications and price for the residential unit.

All images are for informational purposes only. Please note that we cannot guarantee the exact correspondence of characteristics in presentation images due to differences in display settings on various monitors.

All commercial presentation materials related to this residential project (images, technical specifications, finishes, prices, etc.) do not create contractual obligations, do not constitute contract offers, and may be unilaterally modified by the Developer.

Detailed information, viewings, and contracting are available only through the Developer’s authorized representatives.

For additional information regarding how we collect, use, store, and protect your personal data, we encourage you to also review the Terms and Conditions applicable to website use, as well as the Cookie Policy. These documents contain important details regarding your rights and options related to data processing, as well as information about the technologies used to provide you with an optimal browsing experience.

 

Last updated: 12.08.2025